most citedReframing LLM Agent Security as an Agent-Human Interaction Problem

3 citations · 3 across the 10 of their papers we have counts for

collaborators

10 papers

cs.CR2026

Knowledge Over Parameters: Evolving Smart Contract Vulnerability Detection

Yuqiang Sun, Han Liu, Ying Li +4

Smart contract vulnerabilities are predominantly logic bugs whose detection requires structured, step-by-step procedural knowledge of attack patterns and contract semantics. Existi…

cs.CR2026

VIGIL: Runtime Enforcement of Behavioral Specifications in AI Agent Skills

Ying Li, Yanju Chen, Hongbo Wen +5

Agentic systems increasingly act through third-party skills, allowing model-generated decisions to affect files, communication channels, and cyber-physical devices. These skills of…

cs.CR2026

Aligning Provenance with Authorization: A Dual-Graph Defense for LLM Agents

Peiran Wang, Ying Li, Yuan Tian

LLM-based agents are increasingly deployed in high-stakes scenarios such as email management, financial transactions, and code execution, where they interact with the external worl…

cs.CR2026★ 3 cited

Reframing LLM Agent Security as an Agent-Human Interaction Problem

Peiran Wang, Ying Li, Yuan Tian

We argue that LLM agent security is fundamentally an agent-human interaction (AHI) problem, not a purely algorithmic one. To substantiate this position, we conduct a systematic ana…

cs.SE2026

Towards In-Depth Root Cause Localization for Microservices with Multi-Agent Recursion-of-Thought

Lingzhe Zhang, Tong Jia, Kangjin Wang +8

As modern microservice systems grow increasingly complex due to dynamic interactions and evolving runtime environments, they experience failures with rising frequency. Ensuring sys…

cs.CR2026

No Attack Required: Semantic Fuzzing for Specification Violations in Agent Skills

Ying Li, Hongbo Wen, Yanju Chen +3

LLM-powered agents can silently delete documents, leak credentials, or transfer funds on a routine user request, not because the agent was attacked, but because the skill it invoke…

cs.CR2026

Options, Not Clicks: Lattice Refinement for Consent-Driven MCP Authorization

Ying Li, Yanju Chen, Peiran Wang +4

As Model Context Protocol adoption grows, securing tool invocations via meaningful user consent has become a critical challenge, as existing methods, broad always allow toggles or…

cs.CR2026

Semia: Auditing Agent Skills via Constraint-Guided Representation Synthesis

Hongbo Wen, Ying Li, Hanzhi Liu +4

An agent skill is a configuration package that equips an LLM-driven agent with a concrete capability, such as reading email, executing shell commands, or signing blockchain transac…

cs.CR2025

Breaking the illusion: Automated Reasoning of GDPR Consent Violations

Ying Li, Wenjun Qiu, Faysal Hossain Shezan +5

Recent privacy regulations such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) have established legal requirements for obtaining us…

cs.CR2025

SoK: Towards Effective Automated Vulnerability Repair

Ying Li, Faysal hossain shezan, Bomin wei +2

The increasing prevalence of software vulnerabilities necessitates automated vulnerability repair (AVR) techniques. This Systematization of Knowledge (SoK) provides a comprehensive…